Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
References
Configurations
Configuration 1 (hide)
|
History
25 Jan 2024, 16:45
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Citrix netscaler Application Delivery Controller
Citrix Citrix netscaler Gateway |
|
| CPE | cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CWE | CWE-94 | |
| References | () https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549 - Vendor Advisory |
18 Jan 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface. |
17 Jan 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-17 20:15
Updated : 2025-01-27 21:48
NVD link : CVE-2023-6548
Mitre link : CVE-2023-6548
JSON object : View
Products Affected
citrix
- netscaler_application_delivery_controller
- netscaler_gateway
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')